gtin.tv.sa-rugby.co.za
Issued by R3
About this certificate
This digital certificate with serial number 04:db:7b:5c:30:2f:d9:f4:90:e4:fd:73:85:f1:e9:d9:3b:47 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=gtin.tv.sa-rugby.co.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:db:7b:5c:30:2f:d9:f4:90:e4:fd:73:85:f1:e9:d9:3b:47Serial Number (int): 423134955794865878464210346447783853636423
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 87:e4:d2:c2:03:db:a4:a6:8b:22:7c:27:2d:d3:7b:a5:6d:96:6b:89
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c2:5d:53:a0:d3:d1:b4:68:aa:f1:98:2e:e9:69:20:1b:a2:e6:fc:1b
Fingerprint (sha256): 29:f3:cf:d1:b8:f6:f0:86:3e:71:70:56:71:f5:72:c1:07:85:a6:ee:54:ee:71:89:3d:ea:7f:b5:2d:7e:90:55
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate gtin.tv.sa-rugby.co.za
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gtin.tv.sa-rugby.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
almadenrealestate.com
alternativepac.org.keywestconchrepublic.com.gethegswitch.com
arbitrageurs.fr
bravingbirthbeautifully.com
gfdlaw.com
gtin.tv.sa-rugby.co.za
hemponhemp.com
home-showings.com
pij.co.in
startfunding.org
valoralgo.io
alternativepac.org.keywestconchrepublic.com.gethegswitch.com
arbitrageurs.fr
bravingbirthbeautifully.com
gfdlaw.com
gtin.tv.sa-rugby.co.za
hemponhemp.com
home-showings.com
pij.co.in
startfunding.org
valoralgo.io
Other certificates including the domain name sa-rugby.co.za
(limited to 100 certificates)
Certificate
The complete raw certificate details for gtin.tv.sa-rugby.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgISBNt7XDAv2fSQ5P1zhfHp2TtHMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTUxMDMyMDlaFw0yNDAzMTQxMDMyMDhaMCExHzAdBgNVBAMT Fmd0aW4udHYuc2EtcnVnYnkuY28uemEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC+PDpA+DDoYZcnqiyjADRu2vnolH74kGDb9UQQmvL+5EIXGApwrIeM ENV1ptBHb+zYr4B8STP7f1oepNWDJiwgKjLQN33mV532ePoKgmlyYeelsJubmAsK CJND3Avtx6+Xuoh0OTUM8DWCbY0WMcm6uzn/6xauyS4O6jsIyT8fV7/rClr9CeTx WF5RhcELTxOfSke7Jldme/w4NgciSZupciO1XtIUfcW01CjkvHU+nlZumCGCMUBQ ey23FxzoeahO2YA6rvmrdlQT/BaqYtyqTpshvoBOmZXgE8LnYUCPfZTZFlvTt528 IrjHgi3wurQYjynEZUKwOC8tK5js2LRlAgMBAAGjggL4MIIC9DAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFIfk0sID26SmiyJ8Jy3Te6VtlmuJMB8GA1UdIwQYMBaAFBQu sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s ZW5jci5vcmcvMIIBAAYDVR0RBIH4MIH1ghVhbG1hZGVucmVhbGVzdGF0ZS5jb22C PGFsdGVybmF0aXZlcGFjLm9yZy5rZXl3ZXN0Y29uY2hyZXB1YmxpYy5jb20uZ2V0 aGVnc3dpdGNoLmNvbYIPYXJiaXRyYWdldXJzLmZyghticmF2aW5nYmlydGhiZWF1 dGlmdWxseS5jb22CCmdmZGxhdy5jb22CFmd0aW4udHYuc2EtcnVnYnkuY28uemGC DmhlbXBvbmhlbXAuY29tghFob21lLXNob3dpbmdzLmNvbYIJcGlqLmNvLmlughBz dGFydGZ1bmRpbmcub3Jnggx2YWxvcmFsZ28uaW8wEwYDVR0gBAwwCjAIBgZngQwB AgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBIsONr2qZHNA/lagL6nTDrHFIB y1bdLIHZu7+rOdiEcwAAAYxtP4pLAAAEAwBGMEQCIB1/FiheWFBRnz61Lz594OE0 riZOrWuqMXr91ijn6wLKAiBI70Mpi7dHN8mQLgAXPnvSWUj01t6ONpOzWRqv+VHU LAB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjG0/ipYAAAQD AEcwRQIgBU9df4n/s8BwxrQzgfUydHCjAIcGOzaYxMEhaqbmhP4CIQCTfntqXSnZ 3ANuxIx0lfxqXx9922WfMESweY5iBCwi2TANBgkqhkiG9w0BAQsFAAOCAQEAARQo zoT+RJ6CQtIcAWITOyF3+IzvOGNII6lPuVjZuOCnd6qjPGC96DrnbfHQvdRYcNrL VTAHLmP0WL5KjMpiatobsVzIg3wdORJGuIM2jXYTd6PFZfA3YXSGdKzyHw03o/0P Nt+6JYCHP0Xtz+Tw8RBxSya9txKTk/ssDNM5qp4iQ0inXSXs3jtmkEJ046YiCItj wDpzZcSf0CwhUqZ2O9/9GHSogF47R6iBJi1QrCcB6my0r4KvWjB4mNFikqRlZE6a Z8KK3jcYI0wx+Y9j0BcI5qEzsm7hn5KI+e5ETIW8POkEjgqc/+MbpBUm7gIppuDw wAYpTGglQkprDZOy7w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjw6QPgw6GGXJ6osowA0 btr56JR++JBg2/VEEJry/uRCFxgKcKyHjBDVdabQR2/s2K+AfEkz+39aHqTVgyYs ICoy0Dd95led9nj6CoJpcmHnpbCbm5gLCgiTQ9wL7cevl7qIdDk1DPA1gm2NFjHJ urs5/+sWrskuDuo7CMk/H1e/6wpa/Qnk8VheUYXBC08Tn0pHuyZXZnv8ODYHIkmb qXIjtV7SFH3FtNQo5Lx1Pp5WbpghgjFAUHsttxcc6HmoTtmAOq75q3ZUE/wWqmLc qk6bIb6ATpmV4BPC52FAj32U2RZb07edvCK4x4It8Lq0GI8pxGVCsDgvLSuY7Ni0 ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 423134955794865878464210346447783853636423 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 10:32:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 10:32:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gtin.tv.sa-rugby.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24014977257266033306375332517738571643005485099887737373730906389449013092287284005887144394532054249655316606284011250870500012907100841424121853323848027866456397816142526070567942331380140105931403027155296563042933565785868014300111762247429946824492636643780784490288502008478247591169851903995998802267482214939112779552752186393919447488098410943448971738057716595723520099418400540234286374793773201945409389592985426016212783581248099995324645523973802158987682805120422304145342558402660080125068066080238931696124360291044486599463479763221571455044714697983021522107365993864624722128609043359175911453797 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 87e4d2c203dba4a68b227c272dd37ba56d966b89 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (248 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almadenrealestate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alternativepac.org.keywestconchrepublic.com.gethegswitch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageurs.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bravingbirthbeautifully.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfdlaw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtin.tv.sa-rugby.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemponhemp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home-showings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pij.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startfunding.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valoralgo.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c6d3f8a4b000004030046304402201d7f16285e5850519f3eb52f3e7de0e134ae264ead6baa317afdd628e7eb02ca022048ef43298bb74737c9902e00173e7bd25948f4d6de8e3693b3591aaff951d42c00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c6d3f8a9600000403004730450220054f5d7f89ffb3c070c6b43381f5327470a30087063b3698c4c1216aa6e684fe022100937e7b6a5d29d9dc036ec48c7495fc6a5f1f7ddb659f3044b0798e62042c22d9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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